2421 matches found
RunCMS 1.6 Get Admin Cookie Remote Blind SQL Injection Exploit
No description provided by source. // / RUNCMS 1.6 BLIND SQL Injection Exploit get Admin Cookie / // / exploit get admin cookie that can be used / / to login by pasting it into browser Opera / / and then get access to Admin session / / and change Admins password / / / // // / tested on RUNCMS...
Jupiter 1.1.5ex Privileges Escalation Exploit
No description provided by source. ?php WwW.BugReport.ir AmnPardaz Security Research & Penetration Testing Group Title: Jupiter 1.1.5ex Privileges Escalation Vendor: http://www.jupiterportal.com original advisory: http://www.bugreport.ir/?/23 ? html dir="ltr" head meta http-equiv="Content-Type"...
RunCMS 1.6 - Multiple Vulnerabilities
RunCMS 1.6 - Multiple Vulnerabilities Digital Security Research Group Advisory Application: RunCMS Versions Affected: RunCMS 1.6 Vendor URL: http://www.runcms.org Bugs: SQL Injections, XSS, PHP Include, Predictable session id, etc. Exploits: Aviable Reported: 14.12.2007 Vendor response: 15.12.200...
RunCMS 1.6 - Get Admin Cookie Blind SQL Injection
// / RUNCMS 1.6 BLIND SQL Injection Exploit get Admin Cookie / // / exploit get admin cookie that can be used / / to login by pasting it into browser Opera / / and then get access to Admin session / / and change Admins password / / / // // / tested on RUNCMS english version 1.6 / // // / Date of...
RunCMS 1.6 - Get Admin Cookie Blind SQL Injection
RunCMS 1.6 - Get Admin Cookie Blind SQL Injection // / RUNCMS 1.6 BLIND SQL Injection Exploit get Admin Cookie / // / exploit get admin cookie that can be used / / to login by pasting it into browser Opera / / and then get access to Admin session / / and change Admins password / / / // // / teste...
Unfixed XSS vulnerability at directory.searchnewz.com
Security researcher Uber0n, has submitted on 20/12/2007 a cross-site-scripting XSS vulnerability affecting directory.searchnewz.com, which at the time of submission ranked 41933 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 23/12/2007. It is...
[ISR] - Novell Groupwise client remote stack overflow silently patched.
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 || ISR || || Infobyte Security Research || www.infobyte.com.ar || 12.14.2007 || .:: SUMMARY Novell GroupWise Client Remote Stack Overflow Version: GroupWise 6.5.6, It is suspected that all previous versions of Groupwise Client are vulnerable. .::...
Tftpd32 2.81 (GET Request) Format String Denial of Service PoC
No description provided by source. !/usr/bin/perl Tftpd32 Format String PoC DoS by Critical Security research http://www.critical.lt use IO::Socket; $port = "69"; $host = "127.0.0.1"; $tftpudp = IO::Socket::INET-newPeerPort = $port,PeerAddr = $host,Proto= 'udp'; $bzz = "\x00\x01" ; GET $bzz .=...
Unfixed XSS vulnerability at www.iloxx.de
Security researcher Nemessis, has submitted on 12/06/2007 a cross-site-scripting XSS vulnerability affecting www.iloxx.de, which at the time of submission ranked 139089 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 12/06/2007. It is currently...
skyportal-multi.txt
WwW.BugReport.ir BugReport Security Research & Penetration Testing Group Title: Sky Portal Multiple SQL Injection Vulnerabilities Vendor: http://skyportal.net Exploitation: Remote with browser Fix Available: Patched In Last Version In Vendor Leaders : Shahin Ramezany & Sorush Dalili Team Members:...
RunCMS 1.6 - 'disclaimer.php' Remote File Overwrite
RunCmss Bug Yahoo! Crawler body font-size: 10px; font-family: verdana; INPUT BORDER-TOP-WIDTH: 1px; FONT-WEIGHT: bold; BORDER-LEFT-WIDTH: 1px; FONT-SIZE: 10px; BORDER-LEFT-COLOR: D50428; BACKGROUND: 590009; BORDER-BOTTOM-WIDTH: 1px; BORDER-BOTTOM-COLOR: D50428; COLOR: 00ff00; BORDER-TOP-COLOR:...
RunCMS <= 1.6 disclaimer.php Remote File Overwrite Exploit
Exploit for unknown platform in category web applications ========================================================== RunCMS RunCmss Bug Yahoo! Crawler body font-size: 10px; font-family: verdana; INPUT BORDER-TOP-WIDTH: 1px; FONT-WEIGHT: bold; BORDER-LEFT-WIDTH: 1px; FONT-SIZE: 10px;...
RunCMS <= 1.6 Local File Inclusion Vulnerability
Exploit for unknown platform in category web applications ================================================ RunCMS Local File Inclusion Remote Code Execution Code Snippet: /include/common.php line131-143 // :: Register Globals Compatibility :: $globalstest = @ini...
skyportal vrc6 - Multiple Vulnerabilities
skyportal vrc6 - Multiple Vulnerabilities WwW.BugReport.ir BugReport Security Research & Penetration Testing Group Title: Sky Portal Multiple SQL Injection Vulnerabilities Vendor: http://skyportal.net Exploitation: Remote with browser Fix Available: Patched In Last Version In Vendor Leaders :...
Unfixed XSS vulnerability at www.tidaholm.se
Security researcher Uber0n, has submitted on 19/11/2007 a cross-site-scripting XSS vulnerability affecting www.tidaholm.se, which at the time of submission ranked 2528319 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 29/11/2007. It is current...
Mozilla Firefox <= 2.0.0.7 Remote Denial of Service Exploit
No description provided by source. i WwW.BugReport.ir AmnPardaz Security Research & Penetration Testing Group Bug Title: Mozilla Firefox 2.0.0.7 Denial of Service Vendor URL: www.mozilla.org Version: = 2.0.0.7 Fix Available: Yes! Soloution: Update to 2.0.0.8...
Mozilla Firefox 2.0.0.7 - Malformed XBL Constructor Remote Denial of Service
source: https://www.securityfocus.com/bid/26172/info Mozilla Firefox is prone to a remote denial-of-service vulnerability because it fails to adequately sanitize user-supplied input. Attackers can exploit this issue to cause denial-of-service conditions. Firefox 2.0.0.7 is vulnerable; other...
Unfixed XSS vulnerability at www.sehitlerolmez.net
Security researcher st@rext, has submitted on 14/10/2007 a cross-site-scripting XSS vulnerability affecting www.sehitlerolmez.net, which at the time of submission ranked 282766 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 02/11/2007. It is...
CA BrightStor ARCServe BackUp Message Engine Remote Stack Overflow Vulnerability
hi full-disclosure, CA BrightStor ARCServe BackUp Message Engine Remote Stack Overflow Vulnerability by cocoruder of Fortinet Security Research Team http://ruder.cdut.net Summary: A remote stack overflow vulnerability exist in the RPC interface of CA BrightStor ARCServe BackUp. An arbitrary...
Simple PHP Blog Multiple Vulnerabilities
Secure Network - Security Research Advisory Vuln name: Simple PHP Blog Multiple Vulnerabilities Systems affected: simplePHPBlog 0.5.0.1, simplePHPBlog 0.4.8 and all previous versions Systems not affected: - Severity: Medium Local/Remote: Remote Vendor URL: http://www.simplephpblog.com/ Authors:...